Consulting on ZAP

SkypLabs

Wed, 07 May 2025 00:00:00 +0000

SkypLabs is an Ireland-based company providing a wide range of IT services globally, including security reviews and penetration testing. Created in 2021, we have since worked with many different organisations to help them build and secure their work.

ZAP is our main tool when conducting web application penetration tests, and we also use it when analysing the web trafic of desktop and mobile applications. Besides its versatility and unique features compared to competitors, as being a company focusing on open-source and user-respecting software, we love being able to contribute to projects that share our values. We have, for instance, added the possibility to probe and parse .DS_Store files to automatically discover new resources on a website with kingthorin’s help, and the ability of searching into notes (that we use a lot during security engagements).

Possible Security

Wed, 30 Apr 2025 00:00:00 +0000

At Possible Security, we deliver specialized, expert-driven cybersecurity services to high-profile clients across industries. Our focus areas include penetration testing, red teaming, premium audits, and consulting. Based in Riga – the capital of Latvia and the jewel of Northern Europe – we are one of the few market leaders in the field – serving government institutions, critical infrastructure providers, and private sector clients with complex security needs.

Clue Security Services AG

Wed, 21 Jun 2023 00:00:00 +0000

The ZAP tool is a significant asset to Clue, as it is utilized on a daily basis by our security engineers. For the efficient design of a resilient WAF security policy, it is vital to reverse engineer the data flow of an application. ZAP offers an easy way to make the data flow transparent, to visualize the attack surface, and to develop tailor-made policies to minimize it. ZAP is also regularly used in application security consulting. Whether it is to develop and demonstrate a proof of concept for a found code vulnerability, to test an implemented application security function or just to have a function report which is used for threat modeling of an existing function. It is a pleasure to work with ZAP, which we use as a multi-tool for a variety of tasks related to application security.